github/advisory-database
View on GitHub ↗ ★ 2,541
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
10 mentions on Hacker News by 8 people: 4 stories, 6 comments · first 2022-02-23 · latest 2026-10-09
20082026
-
…time. edit: they do appear to all be the same thing, and the advisory version wildcard is wrong: https://github.com/github/advisory-database/issues/6099
comment by herpdyderp · 2025-09-08 · in NPM debug and chalk packages compromised -
…is currently incorrectly flagging all versions of these packages, not just the compromised ones. https://github.com/github/advisory-database/issues/6098
comment by epmatsw · 2025-09-08 · in NPM debug and chalk packages compromised -
…security impact. We believe it makes sense to keep the advisory but to lower the severity to low." https://github.com/github/advisory-database/pull/3504#issuec...
comment by proactivesvcs · 2024-06-30 · in Dev rejects CVE severity, makes his GitHub repo read-only -
I am trying this on GitHub https://github.com/github/advisory-database/pull/1595
comment by michaelermer · 2023-01-11 · in CVE-2022-23529 – node-jsonwebtoken -
…perspectives on severity (one of which is our own), but that we could do more to make that clear. https://github.com/github/advisory-database/blob/main/adviso...
comment by greysteil · 2022-02-27 · in GitHub’s database of security advisories is now open source -
…love you to open an issue on the DB). We want to do a more complete backfill in the near future. https://github.com/github/advisory-database/blob/main/adviso...
comment by greysteil · 2022-02-27 · in GitHub’s database of security advisories is now open source